Australian businesses have a legal obligation to avoid dealing with entities on government sanctions lists. This applies to suppliers, vendors, contractors, and any business you pay money to. Breaching Australian sanctions law is a criminal offence carrying serious penalties.
This guide explains what the Australian sanctions lists are, why you need to check them, and how to do it for free — in under 5 minutes.
Who needs to read this: Any Australian business that deals with international suppliers, uses offshore software vendors, hires overseas contractors, or operates in industries with international supply chains. The sanctions obligation applies regardless of business size.
What are the Australian sanctions lists?
Australia maintains several sanctions regimes, administered by the Department of Foreign Affairs and Trade (DFAT). The key ones for businesses are:
- DFAT Consolidated Sanctions List: Entities, individuals, and organisations subject to Australian autonomous and UN sanctions. Updated regularly. Covers individuals, companies, and vessels.
- UN Security Council Consolidated List: Australia implements all UN sanctions. Entities on this list are also captured by Australian law.
In addition, while not an Australian legal requirement, most internationally-operating Australian businesses also check the US Office of Foreign Assets Control (OFAC) Specially Designated Nationals (SDN) list, because transactions involving OFAC-sanctioned entities can expose Australian businesses to US secondary sanctions risk.
How to check manually — DFAT
Go to dfat.gov.au/international-relations/security/sanctions/consolidated-list.
Download the consolidated list (available as a CSV or XML file) and search for:
- The vendor/supplier company name (and any trading names)
- The names of known directors or beneficial owners
- The country of registration if it's a higher-risk jurisdiction
The list is updated regularly — a check you ran 6 months ago may be out of date. For high-value or ongoing vendor relationships, run the check at contract signing and again at each renewal.
How to check manually — OFAC
Go to ofac.treasury.gov and use the search function. Search the vendor company name and director names.
OFAC also offers a free sanctions screening tool at sanctions.ofac.treas.gov.
What happens if you pay a sanctioned entity?
Under the Autonomous Sanctions Act 2011, Australian persons and entities that deal with sanctioned persons can face criminal penalties including fines and imprisonment. The "I didn't know" defence is very limited — the obligation is on you to check.
Civil penalties under the Act were increased significantly in recent years. For corporations, penalties can reach millions of dollars.
| Sanctions list | Who maintains it | Legal basis | How to check |
|---|---|---|---|
| DFAT Consolidated List | Australian Government | Autonomous Sanctions Act 2011 | dfat.gov.au |
| UN Security Council List | United Nations | UN Charter, implemented by Australia | Via DFAT consolidated list |
| OFAC SDN List | US Treasury | US law (secondary risk for AU businesses) | ofac.treasury.gov |
Run all 13 checks automatically
Stop doing this manually. Validios runs 13 live background checks on any vendor in 60 seconds — sanctions, breaches, ABN, SSL, email security and more. Free to view. $19.99 for the full audit-ready PDF report.
Check a vendor free →Free to view · $19.99 for the full report · No subscription
How often should you check?
- At vendor onboarding: Always. No exceptions.
- At contract renewal: Always. Lists change.
- When ownership changes: If a vendor is acquired or changes directors, recheck.
- For high-risk vendors: Consider quarterly checks for vendors in higher-risk jurisdictions or industries.
Building sanctions screening into your vendor process
The most practical approach for a small business is to include sanctions screening as a standard step in your vendor onboarding checklist. It takes under 5 minutes manually, or it can be automated as part of a broader vendor assessment.
Good news: Validios runs live DFAT and OFAC sanctions screening automatically as part of every vendor assessment. The sanctions data is refreshed daily. You get a clear PASS or FAIL result with the last update timestamp — no manual searching required.